CVE-2026-110112CWE-863broken-access-control

CVE-2026-110112

High · published October 13, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
32.0
In the wild
Unconfirmed
What it is

Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate the mapped admin group and log in as Dockhand administrators.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
9.2 · CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00391 · 32.0th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-10-13T23:18Z
References (2)
https://github.com/Finsys/dockhand/security/advisories/GHSA-h4vc-h76x-c279 · [email protected]https://www.vulncheck.com/advisories/dockhand-before-1.0.50-oidc-privilege-escalation-via-missing-token-claim-validation · [email protected]
EPSS history
Timeline
  • 15 OCT 03:28Z
    EPSS moved — → 0%
    epss
  • 13 OCT 19:05Z
    Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation
    cvelistv5
  • 13 OCT 19:05Z
    Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation
    cvelistv5